Re: DNSSEC regulatory requirements?

2023-04-05 Thread Klaus Malorny
On 04.04.23 15:11, Josh Kuo wrote: Hi all, [...] The only one I know of is the very dated US OMB memo from 2008. I see several European domains have better DNSSEC deployment rates (such as .de). Are there any regulations or friendly recommendations from some kind of governing body at work he

Re: DynDB - handling arbitrary zones

2019-04-01 Thread Klaus Malorny
On 01.04.19 11:18, Petr Mensik wrote: Hi Klaus, [...] Thanks for the response. I have seen the LDAP implementation, but haven't looked deeper into it. Maybe I will. The main problem is that I don't know which zones I will have to serve beforehand, and they may be many and may change over

DynDB - handling arbitrary zones

2019-03-12 Thread Klaus Malorny
Hi all, first of all, if this is not the right list for such questions, please redirect me. I am exploring the DynDB API of BIND whether it could help us to solve our needs. As I have played around with DLZ quite a few years ago, I was pleased to see a new interface seemingly resolving the

bug reports?

2013-04-26 Thread Klaus Malorny
Hi, can someone please briefly explain how to submit a bug report? I think I have found a small bug causing a protocol error in Bind 9.7.7 (and obviously still existent in 9.9.2) and would like the ISC people know about. Regards, Klaus ___ Please

Re: control channel protocol?

2010-10-18 Thread Klaus Malorny
On 18/10/10 01:16, Doug Barton wrote: On 10/16/2010 4:58 AM, Klaus Malorny wrote: [...] It's virtually certain that you would get better results with less effort by switching to using dynamic updates. hth, Doug Hi Doug, well, I considered this, but as far as I understand, ther

control channel protocol?

2010-10-16 Thread Klaus Malorny
Hi, for one project we are using the "traditional" file based approach, where we update the zone files and call rndc to notify Bind about the changes. At some point I asked myself whether we could avoid calling rndc over and over and instead directly communicating with Bind, even if the protoc

Re: Bind DLZ/DNAME problem

2010-06-29 Thread Klaus Malorny
On 29/06/10 02:53, Mark Andrews wrote: [...] I would remove the following from lib/dns/sdlz.c:find(). /* * Unless this is an explicit lookup at the origin, don't * look at the origin. */ if (i == olabels&&

Bind DLZ/DNAME problem

2010-06-28 Thread Klaus Malorny
Hi, I don't know whether this is the right place to ask, sorry if not. I am currently chasing a problem with DNAMEs: If I have a zone, say, example.net. SOA example.net. NS ... example.net. DNAME example.com. , I have the strange problem that this does not work in a Bind-DLZ configurati

puzzling answer of dig with +sigchase/NSEC3

2009-11-09 Thread Klaus Malorny
Hi, I am playing around with a signed zone which uses NSEC3. If I try to verify a non-existing name or a non-existing type with the "sigchase" option, I get the strange error: ;; Impossible to verify the Non-existence, the NSEC RRset can't be validated: FAILED I then checked it with the "o